CVEvulnerability

CVE-2020-0526

6.7 MEDIUM Published 2020-03-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-03-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected products is provided in intel-sa-00343: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00343.html

Affected configurations

• intel nuc kit nuc8i7bek firmware becfl357.86a.0077 • intel nuc 8 enthusiast pc nuc8i7bekqa firmware becfl357.86a.0077 • intel nuc kit nuc8i7hnk firmware hnkbli70.86a.0059 • intel nuc 8 business pc nuc8i7hnkqc firmware hnkbli70.86a.0059 • intel nuc 8 mainstream-g kit nuc8i7inh firmware inwhl357.0036 • intel nuc 8 mainstream-g kit nuc8i5inh firmware inwhl357.0036 • intel nuc 8 mainstream-g mini pc nuc8i7inh firmware inwhl357.0036 • intel nuc 8 rugged kit nuc8cchkr firmware chaplcel.0047 • intel nuc board nuc8cchb firmware chaplcel.0047 • intel nuc 8 home pc nuc8i3cysm firmware cycnli35.86a.0044 • intel nuc kit nuc7i7dnke firmware dnkbli7v.86a.0067 • intel nuc kit nuc7i7dnhe firmware dnkbli7v.86a.0067 • intel nuc kit nuc7i5dnke firmware dnkbli5v.86a.0067 • intel nuc kit nuc7i5dnhe firmware dnkbli5v.86a.0067 • intel nuc kit nuc7i3dnke firmware dnkbli30.86a.0067 • intel nuc kit nuc7i3dnhe firmware dnkbli30.86a.0067 • intel nuc board nuc7i7dnbe firmware dnkbli7v.86a.0067 • intel nuc board nuc7i5dnbe firmware dnkbli5v.86a.0067 • intel nuc board nuc7i3dnbe firmware dnkbli30.86a.0067 • intel compute stick stk2m3w64cc firmware ccsklm30.86a.0062 • intel compute stick stk2m364cc firmware ccsklm30.86a.0062 • intel compute stick stk1a32sc firmware sc0045 • intel compute stick stk1aw32sc firmware sc0045 • intel nuc kit nuc6i7kyk firmware kyskli70.86a.0066 • intel nuc 7 essential pc nuc7cjysal firmware jyglkcpx.86a.0053 • intel nuc kit nuc7cjyh firmware jyglkcpx.86a.0053 • intel nuc kit nuc7pjyh firmware jyglkcpx.86a.0053 • intel nuc kit nuc7i7bnh firmware bnkbl357.86a.0081 • intel nuc kit nuc7i5bnk firmware bnkbl357.86a.0081 • intel nuc kit nuc7i3bnh firmware bnkbl357.86a.0081 • intel nuc kit nuc7i5bnh firmware bnkbl357.86a.0081 • intel nuc kit nuc7i3bnk firmware bnkbl357.86a.0081 • intel nuc kit nuc7i7bnhx1 firmware bnkbl357.86a.0081 • intel nuc kit nuc7i5bnhx1 firmware bnkbl357.86a.0081 • intel nuc kit nuc7i3bnhx1 firmware bnkbl357.86a.0081 • intel nuc 7 enthusiast pc nuc7i7bnhxg firmware bnkbl357.86a.0081 • intel nuc 7 home a mini pc nuc7i5bnhxf firmware bnkbl357.86a.0081 • intel nuc 7 home a mini pc nuc7i3bnhxf firmware bnkbl357.86a.0081 • intel nuc 7 home a mini pc nuc7i5bnkp firmware bnkbl357.86a.0081 • intel nuc kit nuc6cays firmware ayaplcel.86a.0066 • intel nuc kit nuc6cayh firmware ayaplcel.86a.0066 • intel nuc kit de3815tykhe firmware tybyt20h.86a.0024 • intel nuc board de3815tybe firmware tybyt20h.86a.0024 • intel nuc kit nuc6i3syh firmware syskli35.86a.0072 • intel nuc kit nuc6i5syh firmware syskli35.86a.0072 • intel nuc kit nuc6i3syk firmware syskli35.86a.0072 • intel nuc kit nuc6i5syk firmware syskli35.86a.0072 • intel nuc kit nuc5pgyh firmware pybswcel.86a.0078 • intel nuc kit nuc5ppyh firmware pybswcel.86a.0078 • intel nuc kit nuc5cpyh firmware pybswcel.86a.0078 • intel nuc kit nuc5i5ryk firmware rybdwi35.86a.0383 • intel nuc kit nuc5i3ryh firmware rybdwi35.86a.0383 • intel nuc kit nuc5i3ryhs firmware rybdwi35.86a.0383 • intel nuc kit nuc5i3ryhsn firmware rybdwi35.86a.0383 • intel nuc kit nuc5i3ryk firmware rybdwi35.86a.0383 • intel nuc kit nuc5i5ryh firmware rybdwi35.86a.0383 • intel nuc kit nuc5i5ryhs firmware rybdwi35.86a.0383 • intel nuc kit nuc5i7ryh firmware rybdwi35.86a.0383 • intel nuc kit nuc5i3myhe firmware mybdwi30.86a.0057 • intel nuc kit nuc5i5myhe firmware mybdwi5v.86a.0056 … and 10 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References